CVE-2026-53147

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thunderbolt component where the tb xdp handle request() function casts a received packet buffer to protocol-specific structs without verifying if the allocation is sufficiently large for the target type. A peer can send a minimal XDomain packet that passes the generic header length check but remains shorter than the struct accessed after the cast, leading to out-of-bounds reads from the kmemdup allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.